Relationships

Activities

CertificateChain::attempt_reorder() is there but it seems to be expected that the user of CertificateChain calls it. This could be clearer; CC should probably call attempt_reorder() on add(), or at least assert valid() on root_to_leaf/leaf_to_root.

Maybe just autodetect proper order, and do some button rearranging, e.g. put chain export buttons closer to individual export - so it is clearer they belong together and are not completely different things. Like 'Export single/export chain'.

Also, there is some space on this dialog between the two certificate systems. Maybe add hints there to the importance of backing up these files, and maybe to their location on the different OS's as well. Otherwise, I think it is sufficient if the button placement is reordered so people have a better understanding of what single certs and chains mean and how to deal with them. There is space below the single certificate management buttons, so maybe move the buttons from below the leaf-private key part there. But clearly, dealing with this will never be easy for the beginner.

...but being able to (re)import complete chains would certainly help in backing up and restoring these files. The trouble with this is that usually mistakes only show up when it's too late, so we should make it as failproof as possible.